Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15552 vulnerabilities in this category.

Critical: 1687 High: 4225 Medium: 8839 Low: 799 Information: 2
Vulnerability Name
CVE
CWE
Severity
Microsoft SQL Server Remote Code Execution Vulnerability (CVE-2019-1068)
CVE-2019-1068
-
High
SharePoint CVE-2019-1201 Vulnerability (CVE-2019-1201)
CVE-2019-1201
-
High
SharePoint CVE-2019-1205 Vulnerability (CVE-2019-1205)
CVE-2019-1205
-
High
SharePoint Improper Input Validation Vulnerability (CVE-2019-1257)
CVE-2019-1257
CWE-20
High
SharePoint Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-1261)
CVE-2019-1261
CWE-352
High
SharePoint Improper Input Validation Vulnerability (CVE-2019-1295)
CVE-2019-1295
CWE-20
High
SharePoint Improper Input Validation Vulnerability (CVE-2019-1296)
CVE-2019-1296
CWE-20
High
OpenSSL Cryptographic Issues Vulnerability (CVE-2019-1543)
CVE-2019-1543
-
High
Sqlite Other Vulnerability (CVE-2019-20218)
CVE-2019-20218
-
High
Atlassian Jira Uncontrolled Search Path Element Vulnerability (CVE-2019-20400)
CVE-2019-20400
CWE-427
High
Atlassian Confluence Uncontrolled Search Path Element Vulnerability (CVE-2019-20406)
CVE-2019-20406
CWE-427
High
Atlassian Jira CVE-2019-20413 Vulnerability (CVE-2019-20413)
CVE-2019-20413
-
High
Atlassian Jira Uncontrolled Search Path Element Vulnerability (CVE-2019-20419)
CVE-2019-20419
CWE-427
High
Cherokee Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-20798)
CVE-2019-20798
CWE-707
High
Cherokee Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-20799)
CVE-2019-20799
CWE-119
High
Atlassian Jira CVE-2019-20898 Vulnerability (CVE-2019-20898)
CVE-2019-20898
-
High
Python Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2019-20907)
CVE-2019-20907
CWE-835
High
Handlebars Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-20920)
CVE-2019-20920
CWE-94
High
Handlebars Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2019-20922)
CVE-2019-20922
CWE-835
High
MongoDb Incorrect Comparison Vulnerability (CVE-2019-20925)
CVE-2019-20925
CWE-697
High
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-25450)
CVE-2019-25450
CWE-138
High
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-25452)
CVE-2019-25452
CWE-138
High
osCommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-25495)
CVE-2019-25495
CWE-138
High
osCommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-25496)
CVE-2019-25496
CWE-138
High
osCommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-25497)
CVE-2019-25497
CWE-138
High
qdPM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-25669)
CVE-2019-25669
CWE-138
High
phpBB Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-25685)
CVE-2019-25685
CWE-22
High
MongoDb Insufficient Session Expiration Vulnerability (CVE-2019-2386)
CVE-2019-2386
CWE-613
High
MongoDb CVE-2019-2390 Vulnerability (CVE-2019-2390)
CVE-2019-2390
-
High
Oracle HTTP Server CVE-2019-2414 Vulnerability (CVE-2019-2414)
CVE-2019-2414
-
High
Oracle Database Server CVE-2019-2516 Vulnerability (CVE-2019-2516)
CVE-2019-2516
-
High
Oracle Database Server CVE-2019-2518 Vulnerability (CVE-2019-2518)
CVE-2019-2518
-
High
MySQL CVE-2019-2534 Vulnerability (CVE-2019-2534)
CVE-2019-2534
-
High
Java Unspesificed Vulnerability (CVE-2019-2602)
CVE-2019-2602
-
High
MySQL CVE-2019-2632 Vulnerability (CVE-2019-2632)
CVE-2019-2632
-
High
WebLogic CVE-2019-2647 Vulnerability (CVE-2019-2647)
CVE-2019-2647
-
High
WebLogic CVE-2019-2648 Vulnerability (CVE-2019-2648)
CVE-2019-2648
-
High
WebLogic CVE-2019-2649 Vulnerability (CVE-2019-2649)
CVE-2019-2649
-
High
WebLogic CVE-2019-2650 Vulnerability (CVE-2019-2650)
CVE-2019-2650
-
High
Oracle Database Server CVE-2019-2776 Vulnerability (CVE-2019-2776)
CVE-2019-2776
-
High
Oracle Database Server CVE-2019-2799 Vulnerability (CVE-2019-2799)
CVE-2019-2799
-
High
MySQL CVE-2019-2800 Vulnerability (CVE-2019-2800)
CVE-2019-2800
-
High
MySQL CVE-2019-2822 Vulnerability (CVE-2019-2822)
CVE-2019-2822
-
High
WebLogic CVE-2019-2890 Vulnerability (CVE-2019-2890)
CVE-2019-2890
-
High
WebLogic CVE-2019-2891 Vulnerability (CVE-2019-2891)
CVE-2019-2891
-
High
Atlassian Confluence Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-3394)
CVE-2019-3394
CWE-22
High
Atlassian Confluence Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-3398)
CVE-2019-3398
CWE-22
High
Atlassian Jira Missing Authorization Vulnerability (CVE-2019-3399)
CVE-2019-3399
CWE-862
High
Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2019-3823)
CVE-2019-3823
CWE-125
High
Moodle Improper Input Validation Vulnerability (CVE-2019-3847)
CVE-2019-3847
CWE-20
High
Moodle Improper Privilege Management Vulnerability (CVE-2019-3849)
CVE-2019-3849
CWE-269
High
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2019-3894)
CVE-2019-3894
CWE-264
High
IBM WebSEAL Improper Input Validation Vulnerability (CVE-2019-4036)
CVE-2019-4036
CWE-20
High
IBM WebSEAL CVE-2019-4135 Vulnerability (CVE-2019-4135)
CVE-2019-4135
-
High
IBM WebSEAL CVE-2019-4145 Vulnerability (CVE-2019-4145)
CVE-2019-4145
-
High
IBM RTC Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-4252)
CVE-2019-4252
CWE-22
High
IBM WebSEAL Improper Restriction of XML External Entity Reference Vulnerability (CVE-2019-4707)
CVE-2019-4707
CWE-611
High
Python NULL Pointer Dereference Vulnerability (CVE-2019-5010)
CVE-2019-5010
CWE-476
High
Sqlite Use After Free Vulnerability (CVE-2019-5018)
CVE-2019-5018
CWE-416
High
Ruby on Rails CVE-2019-5418 Vulnerability (CVE-2019-5418)
CVE-2019-5418
-
High
Ruby on Rails Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-5419)
CVE-2019-5419
CWE-770
High
ReviveAdserver Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Vulnerability (CVE-2019-5440)
CVE-2019-5440
CWE-338
High
Oracle HTTP Server Uncontrolled Search Path Element Vulnerability (CVE-2019-5443)
CVE-2019-5443
CWE-427
High
Nexus Repository Manager Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2019-5475)
CVE-2019-5475
CWE-138
High
Drupal Deserialization of Untrusted Data Vulnerability (CVE-2019-6338)
CVE-2019-6338
CWE-502
High
Drupal Deserialization of Untrusted Data Vulnerability (CVE-2019-6340)
CVE-2019-6340
CWE-502
High
W3 Total Cache CVE-2019-6715 Vulnerability (CVE-2019-6715)
CVE-2019-6715
-
High
Moodle Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-6970)
CVE-2019-6970
CWE-918
High
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-6975)
CVE-2019-6975
CWE-770
High
PHP Out-of-bounds Write Vulnerability (CVE-2019-6977)
CVE-2019-6977
CWE-787
High
WebERP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-7755)
CVE-2019-7755
CWE-138
High
Magento Session Fixation Vulnerability (CVE-2019-7849)
CVE-2019-7849
CWE-384
High
Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-7854)
CVE-2019-7854
CWE-639
High
Magento Cryptographic Issues Vulnerability (CVE-2019-7858)
CVE-2019-7858
-
High
Magento Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-7859)
CVE-2019-7859
CWE-22
High